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IN THE CLAIMS: 

1.-5. (Cancelled) 

6. (Currently Amended) A method for maintaining a plurality of virtual servers 
within a server, the method comprising the steps of : 

partitioning resources of the server to establish an instance of each virtual server 
by allocating units of storage and network addresses of network interfaces of the server to 
each instance of the virtual server, and sharing an operating system and a file system of 
the server among all of the virtual servers,-; wherein a selected virtual server is established 

by. 

storing external configuration information of a-fhe selected virtual server of 

the plurality of virtual servers in a global repository maintained on a disk- storage device 
of the server, the external configuration information describing external resources as- 
signed to a virtual server of the plurality of virtual servers, the external resources includ- 
ing the units of storage and the network addresses assigned to the selected virtual server t 
, and 

storing internal configuration information of the selected virtual server of 

the plurality of virtual servers in a private repository, the private repository stored in the 
one or more units of storage assigned to the virtual server, the internal configuration in- 
formation used to control operation of the selected virtual server; 

enabling controlled access to the resources using logical boundary checks and se- 
curity interpretations of those resources within the server by comparing configuration in- 
formation of a unit of storage requested by a particular virtual server with the resources 
allocated to that particular virtual server; and 
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22 providing a virtual server context structure including information pertaining to a 

23 security domain of the virtual server, the virtual server context structure stored in the in- 

24 ternal configuration information. 

1 7. (Previously Presented) The method of Claim 6 wherein the step of allocating 

2 | comprises the step of providing a vfstore list of the virtual server context structure, the 

3 vstore list comprising pointers to vfstore soft objects, each having a pointer that refer- 

4 ences a path to a unit of storage allocated to the virtual server. 

1 8. (Previously Presented) The method of Claim 7 wherein the step of allocating fur- 

2 | ther comprises the step of providing a vfnet list of the virtual server context structure, the 

3 vfnet list comprising pointers to vfnet soft objects, each having a pointer that references 

4 an interface address data structure representing a network address assigned to the virtual 

5 server. 

1 9. (Previously Presented) The method of Claim 8 wherein the step of enabling fur- 

2 | ther comprises the step of performing a virtual server boundary check to verify that a vir- 

3 tual server is allowed to access certain storage resources of the filer. 

1 10. (Original) The method of Claim 9 wherein the step of performing comprises the 

2 step of validating a file system identifier and qtree identifier associated with the units of 

3 storage. 

1 11. (Previously Presented) The method of Claim 10 wherein the step of performing 

2 further comprises the steps of : 
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for each request to access a unit of storage, using the identifiers to determine 
whether the virtual server is authorized to access the unit of storage; 

if the virtual server is not authorized to access the requested unit of storage, im- 
mediately denying the request; 

otherwise, allowing the request; and 

generating file system operations to process the request. 

12. (Cancelled) 

13. (Currently Amended) A server, comprising: 

an operating system configured to partition resources to a plurality of virtual serv- 
ers (vservers) by storing external configuration information of a selected vserver of the 
plurality of vservers stored in a global repository maintained on a storage device of the 
server, the external configuration information describing external resources assigned to a 
vserver of the plurality of vservers, the external configuration information including net- 
work addresses allocated among each of the vservers, and storing internal configuration 
information of the selected virtual server of the plurality of virtual servers stored in a pri- 
vate repository, the private repository stored in one or more units of storage assigned to 
the vserver, the internal configuration information used to control operation of the se- 
lected vserver; 

a storage media configured to store information as units of storage resources, the 
units of storage resources allocated among each of a -the plurality of virtual servers 
(vservers) ; 

one or more network interfaces each assigned one or more network address re- 
sources, the network address resources allocated among each of the virtual servers; 
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an -the operating system having a file system resource, , adapted the operating sys- 
tem further configured to perform a boundary check to verify that a request is allowed to 
access to certain units of storage resources on the storage media, each virtual server al- 
lowed shared access to the file system, where the boundary check is performed by com- 
paring configuration information of a unit of storage requested by a particular vserver 
with the one or more units of storage resources and the one or more network address re- 
sources allocated to that particular vserver; 

a context data structure provided to each virtual server, the context data structure 
including information pertaining to a security domain of the virtual server that enforces 
controlled access to the allocated and shared resources , wherein the context data structure 
is stored in the internal configuration information ; and 

external configuration information of a selected vserver of the plurality of 
vservers stored in a global repository maintained on a disk of the server, the external con 
figuration information describing external resources assigned to a vserver of the plurality 
of vservers, the external configuration information including the network addresses alio 
cated among the each of the vservers; 

internal configuration information of the selected virtual server of the plurality of 

virtual servers stored in a private repository, the private repository stored in the one or 
more units of storage assigned to the vserver, the internal configuration information used 
to control operation of the selected vserver, the context data structure stored in the inter 
nal configuration information; and 

a processing element coupled to the network interfaces and storage media, and 
configured to execute the operating and file systems to thereby invoke network and stor- 
age access operations in accordance with results of the boundary check of the file system. 

14. (Original) The system of Claim 13 wherein the units of storage resources are vol- 
umes and qtrees. 
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15. (Original) The system of Claim 14 further comprising a plurality of table data 
structures accessed by the processing element to implement the boundary check, the table 
data structures including a first table having a plurality of first entries, each associated 
with a virtual server and accessed by a file system identifier (fsid) functioning as a first 
key into the table, each first entry of the first table denoting a virtual server that com- 
pletely owns a volume identified by the fsid. 

16. (Original) The system of Claim 15 wherein the table data structures further in- 
clude a second table having a plurality of second entries, each associated with a virtual 
server and accessed by a second key consisting of an fsid and a qtree identifier (qtreeid), 
each second entry of the second table denoting a virtual server that completely owns a 
qtree identified by the fsid and qtreeid. 

17. (Original) The system of Claim 16 wherein the server is a filer and wherein the 
virtual servers are virtual filers. 

18. -19. (Cancelled) 

20. (Currently Amended) A server, comprising: 

means for allocating dedicated resources of the server to each virtual server 
(vserver) of a plurality of vservers executing on the serve r by storing external configura- 
tion information of a selected vserver of the plurality of vservers stored in a global re- 
pository maintained on a storage device of the server, the external configuration informa- 
tion describing external resources assigned to a vserver of the plurality of vservers, the 
external resources including the means for allocating the dedicated resources, and storing 
internal configuration information of the selected vserver of the plurality of vservers 
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stored in a private repository, the private repository stored in one or more units of storage 
assigned to the vserver, the internal configuration information used to control operation 
of the selected vserver ; 

means for sharing common resources of the server among all of the vservers; and 
means for enabling controlled access to the dedicated and shared resources using 
logical boundary checks and security interpretations of those resources within the server 
and for providing a vserver context structure including information pertaining to a secu- 
rity domain of the vserver, where the logical boundary checks are performed by compar- 
ing configuration information of a unit of storage requested by a particular vserver with 
the dedicated resources allocated to that particular vservert , wherein the vserver context 
structure is stored with the internal configuration information. 

external configuration information of a selected vserver of the plurality of 
vservers stored in a global repository maintained on a disk of the server, the external con 
figuration information describing external resources assigned to a vserver of the plurality 
of vservers, the external resources including the means for allocating the dedicated re 
sources; and 

internal configuration information of the selected vserver of the plurality of 
vservers stored in a private repository, th e private repository stored in the one or more 
units of storage assigned to the vserver, the internal configuration information used to 
control operation of the selected vserver, the internal configuration information including 
the vserver context structure. 

21.-22. (Cancelled) 

23. (Currently Amended) A computer readable medium containing executable pro- 
gram instructions for creating and maintaining a plurality of virtual servers (vservers) 
within a server, the executable program instructions comprising program instructions for: 
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allocating dedicated resources of the server to each vserver by storing external 
configuration information of a selected vserver of the plurality of vservers stored in a 
global repository maintained on a storage device of the server, the external configuration 
information describing external resources assigned to a vserver of the plurality of 
vservers, the external resources including the dedicated resources, and storing internal 
configuration information of the selected vserver of the plurality of vservers stored in a 
private repository, the private repository stored in the one or more units of storage as- 
signed to the vserver, the internal configuration information used to control operation of 
the selected vserver, the internal configuration information including the configuration 
information of a unit of storage ; 

sharing common resources of the server among all of the vservers; and 

enabling access to the dedicated and shared resources using logical boundary 
checks and security interpretations of those resources within the server and providing a 
vserver context structure including information pertaining to a security domain of the 
vserver, where the logical boundary checks are performed by comparing configuration 
information of a unit of storage requested by a particular vserver with the dedicated re- 
sources allocated to that particular vserver^ 

storing external configuration information of a selected vserver of the plurality of 
vservers in a global repository maintained on a disk of the server, the external configura 
tion information describing external resources assigned to a vserver of the plurality of 
vservers, the external resources including allocation of the dedicated resources; and 

storing internal configuration information of the selected vserver of the plurality 

of vservers in a private repository, the private repository stored in the one or more units 
of storage assigned to the vserver, the internal configuration information used to control 
operation of the selected vserver, the internal configuration information including the 
configuration information of a unit of storage . 



24.-25. (Cancelled) 
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26. (Currently Amended) A method for maintaining a plurality of virtual servers 
(vserver) within a server, comprising: 

allocating resources to each instance of the virtual servers of the plurality of serv- 
ers, the resources including units of storage and network addresses of network interfaces 
of the server to each instance of the virtual serve r by storing external configuration in- 
formation of a selected virtual server of the plurality of virtual servers in a global reposi- 
tory maintained on a storage device of the server, the external configuration information 
describing external resources assigned to a virtual server of the plurality of virtual serv- 
ers, the external resources including network addresses, and storing internal configuration 
information of the selected virtual server of the plurality of virtual servers in a private 
repository, the private repository stored in one or more units of storage assigned to the 
virtual server, the internal configuration information used to control operation of the se- 
lected virtual server, the internal configuration information including configuration in- 
formation of a unit of storage ; and 

using boundary checks to access resources allocated to the virtual servers, where a 
particular virtual server is limited by the boundary check to only access the resources as- 
signed to that particular virtual server, where the logical boundary checks are performed 
by comparing configuration information of a -the unit of storage requested by a particular 
vserver with the resources allocated to that particular vservert, 

storing external configuration information of a selected virtual server of the plu 
rality of virtual servers in a global r e pository maintained on a disk of the server, the ex 
ternal configuration information describing external resources assigned to a virtual server 
of the plurality of virtual servers, the external resources including the network addresses ; 

storing internal configuration information of the selected virtual server of the plu 

rality of virtual servers in a private repository, the private repository stored in the one or 
more units of storage assigned to the virtual server, the internal configuration information 



PATENTS 
112056-0022 
P01-1047 



used to control operation of the selected virtual server, the internal configuration informa 
tion including configuration information of a unit of storage. 

27. (Currently Amended) A server, comprising: 

means for allocating resources to each instance of a virtual server of a plurality of 
virtual servers executing on the server, the resources including units of storage and net- 
work addresses of network interfaces of the server to each instance of the virtual server 
by storing external configuration information of a selected virtual server of the plurality 
of virtual servers in a global repository maintained on a storage device of the server, the 
external configuration information describing external resources assigned to a virtual 
server of the plurality of virtual servers, the external resources including the network ad- 
dresses, and storing internal configuration information of the selected virtual server of the 
plurality of virtual servers in a private repository, the private repository stored in one or 
more units of storage assigned to the virtual server, the internal configuration information 
used to control operation of the selected virtual server, the internal configuration informa- 
tion including configuration information of a unit of storage ; and 

means for using boundary checks to access resources allocated to the virtual serv- 
ers, where a particular virtual server is limited by the boundary check to only access the 
resources assigned to that particular virtual server, where the logical boundary checks are 
performed by comparing configuration information of a -the unit of storage requested by a 
particular vserver with the resources allocated to that particular vserver^ 

means for storing external configuration information of a selected virtual server of 
the plurality of virtual servers in a global repository maintained on a disk of the server, 
the external configuration information describing external resources assigned to a virtual 
server of the plurality of virtual servers, the external resources including the network ad 
dresses; and 

means for storing internal configuration information of the selected virtual server 
of the plurality of virtual servers in a private repository, the private repository stored in 
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the one or more units of storage assigned to the virtual server, the internal configuration 
information used to control operation of the selected virtual server, the internal configura 
tion information including configuration information of a unit of storage. 

28. (Currently Amended) A server, comprising: 

a storage media configured to allocate resources to each virtual server of a plural- 
ity of virtual servers executing on the server, the resources including units of storage and 
network addresses of network interfaces of the server to each instance of the virtual 
server network interfaces assigned one or more network address resources, the network 
address resources allocated among each of the virtual servers , wherein the resources are 
allocated to each virtual server by storing external configuration information of a selected 
virtual server of the plurality of virtual servers stored in a global repository maintained on 
a storage device of the server, the external configuration information describing external 
resources assigned to a virtual server of the plurality of virtual servers, the configuration 
information including the units of storage, and storing internal configuration information 
of the selected virtual server of the plurality of virtual servers stored in a private reposi- 
tory, the private repository stored in one or more units of storage assigned to the virtual 
server, the internal configuration information used to control operation of the selected 
virtual server, the internal configuration information including the configuration informa- 
tion of a unit of storage ; and 

an operating system adapt e d configured to perform a boundary check to verify ac- 
cess to resources allocated to the virtual servers, where a particular virtual server is lim- 
ited by the boundary check to only access the resources assigned to that particular virtual 
server, where the logical boundary checks are performed by comparing configuration in- 
formation of a- the unit of storage requested by a particular vserver with the resources al- 
located to that particular vserver^. 



PATENTS 
112056-0022 
P01-1047 



external configuration information of a selected virtual server of the plurality of 
virtual servers stored in a global repository maintained on a disk of the server, the exter 
nal configuration information describing external resources assigned to a virtual server of 
the plurality of virtual servers, the configuration information including the units of stor 

internal configuration information of the selected virtual server of the plurality of 
virtual servers stored in a private repository, the private repository stored in the one or 
more units of storage assigned to the virtual server, the internal configuration information 
used to control operation of the selected virtual server, the internal configuration informa 
tion including the configuration information of a unit of storage. 

29. (Currently Amended) A method for maintaining one or more virtual servers 
within a server, comprising: 

allocating resources to a first virtual server of the one or more virtual servers, 
where the resources include one or more units of storage and at least one network address 
of one or more network interfaces of the server to a first virtual server of the one or more 
virtual servers , wherein the resources are allocated by storing external configuration in- 
formation of a selected virtual server of the plurality of virtual servers in a global reposi- 
tory maintained on a storage device of the server, the external configuration information 
describing external resources assigned to a virtual server of the plurality of virtual serv- 
ers, the external configuration information including the one or more units of storage and 
at least one network address, and storing internal configuration information of the se- 
lected virtual server of the plurality of virtual servers in a private repository, the private 
repository stored in the one or more units of storage assigned to the virtual server, the in- 
ternal configuration information used to control operation of the selected virtual server, 
the internal configuration information including the configuration information ; 

requesting a first unit of storage of the one or more units of storage by a first vir- 
tual server; and 
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using a boundary check to access the first unit of storage by comparing configura- 
tion information of the first unit of storage with resources allocated to the first virtual 
server^ 

storing external configuration information of a selected virtual server of the plu 
rality of virtual servers in a global repository maintained on a disk of the server, the ex 
ternal configuration information describing external resources assigned to a virtual server 
of the plurality of virtual servers, the external configuration information including the one 
or more units of storage and at least one network address; and 

storing internal configuration information of the selected virtual server of the plu 
rality of virtual servers in a private repository, the private repository stored in the one or 
more units of storage assigned to the virtual server, the internal configuration information 
used to control operation of the selected virtual server, the internal configuration informa 
tion including the configuration information. 

30. (Previously Presented) The method of claim 29, wherein the configuration infor- 
mation is an inode from a requested file. 

31. (Currently Amended) A method for maintaining a plurality of virtual servers on a 
server, comprising: 

storing external configuration information of a selected virtual server of the plu- 
rality of virtual servers in a global repository maintained on a storage device disk- of the 
server, the external configuration information describing external resources assigned to a 
virtual server of the plurality of virtual servers; 

storing internal configuration information of the selected virtual server of the plu- 
rality of virtual servers in a private repository, the private repository stored in the-one or 
more units of storage assigned to the virtual server, the internal configuration information 
used to control operation of the selected virtual server; and 
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maintaining security domain information in the internal configuration informa- 
tion , wherein the security domain information is used to control access to the selected 
virtual server . 

32. (Previously Presented) The method of claim 31, further comprising: 
storing the global repository in a root node of the server. 

33. (Previously Presented) The method of claim 31, further comprising: 
including in the external configuration information one or more IP addresses. 

34. (Previously Presented) The method of claim 31, further comprising: 
including in the external configuration information identification of one or more 

units of storage. 

35. (Previously Presented) The method of claim 31, further comprising: 
including in the external configuration information a volume identification to 

identify a file system executing the selected virtual server. 

36. (Previously Presented) The method of claim 31, further comprising: 
including in the external configuration information protocols allowed to run on 

the selected virtual server. 

37. (Previously Presented) The method of claim 31, further comprising: 
including the internal configuration information in a virtual server context data 

structure stored in storage space assigned to the virtual server. 

38. (Previously Presented) The method of claim 31, further comprising: 
including in the internal configuration information a pointer to software associ- 
ated with hardware assigned to the virtual server in the global repository. 
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39. (Previously Presented) The method of claim 31, further comprising: 
including in the internal configuration information a pointer to software associ- 
ated with an IP address assigned to the virtual server in the global repository. 

40. (Previously Presented) The method of claim 31, further comprising: 
including in the internal configuration information a pointer to software associ- 
ated with a unit of storage assigned to the virtual server in the global repository. 

41. (Previously Presented) The method of claim 31, further comprising: 
including in the internal configuration information a pointer to software associ- 
ated with a protocol assigned to the virtual server in the global repository. 

42. (Previously Presented) The method of claim 31, further comprising: 
including in the internal configuration information a pointer to software associ- 
ated with a security domain assigned to the virtual server in the global repository. 

43. (Previously Presented) The method of claim 31, further comprising: 
including in the internal configuration information a pointer to software associ- 
ated with a security data base holding security information assigned to the virtual server. 

44. (Previously Presented) The method of claim 31, further comprising: 
including in the internal configuration information a pointer to software associ- 
ated with storage units which the virtual server is permitted to access to enable the virtual 
server to perform boundary checks when accessing storage blocks. 

45. (Previously Presented) The method of claim 31, further comprising: 
including in the internal configuration information a pointer to software associ- 
ated with a file system identification (fsid) table, the fsid serving as an index into the 
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fsid table to an entry indicating whether or not the virtual server completely owns a unit 
of storage, and in the event that the entry in the fsid table indicates that the virtual server 
does completely own the unit of storage, permitting the virtual server access to the unit of 
storage. 

46. (Previously Presented) The method of claim 31, further comprising: 
including in the internal configuration information a pointer to software associ- 
ated with a file system identification (fsid) table, the fsid serving as an index into the 
fsid table to an entry indicating whether or not the virtual server completely owns a unit 
of storage, and in the event that the entry in the fsid table indicates that a different virtual 
server does completely own the unit of storage, denying the virtual server access to the 
unit of storage. 

47. (Previously Presented) The method of claim 46, further comprising: 

in the event that the virtual server does not completely own the unit of storage and 
in the event that no different virtual server completely owns the unit of storage, entering a 
qtree table using a qtree to the unit of storage to determine if the virtual server owns the 
qtree to the unit of storage, and if the virtual server does own the qtree to the unit of stor- 
age, providing access by the virtual server to the unit of storage. 

48. (Currently Amended) The method of claim 31, further comprising: 
receiving an authentication request, the authentication request requiring contact- 
ing an external server; and 

reading from the internal configuration information a process identification (PID) 
that enables an operating system to send an authentication request to the-a_correct authen- 
tication process. 

49. (Currently Amended) A server, comprising: 

a plurality of virtual servers executing on the server; 
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an operating system executed by a processor within the server, where the operat- 
ing system is configured to store external configuration information of a selected virtual 
server of the plurality of virtual servers stored in a global repository maintained on a stor- 
age device dis-k of the server, the external configuration information describing external 
resources assigned to a virtual server of the plurality of virtual servers^- , and to store 

internal configuration information of the selected virtual server of the plurality of 

virtual servers stored in a private repository, the private repository stored in the-one or 
more units of storage assigned to the virtual server, the internal configuration information 
used to control operation of the selected virtual server; and 

security domain information maintained in the internal configuration information 
wherein the security domain information is used to control access to the selected virtual 
server . 

50. (Currently Amended) The method server of claim 49, further comprisingi wherein 
afl-the operating system is further configured to store the global repository in a root node 
of the server. 

51. (Currently Amended) The server method of claim 49, further comprising: 
an -wherein the operating syste m further configured to store in the external con- 
figuration information one or more IP addresses. 

52. (Currently Amended) The server method of claim 49, wherein the further com 

an-operating system further configured to include in the external configuration in- 
formation identification of one or more units of storage. 

53. (Currently Amended) The server method of claim 49, further comprising: 
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an -wherein the operating system further configured to include in the external con- 
figuration information a volume identification to identify a file system executing the se- 
lected virtual server. 

54. (Currently Amended) The server method of claim 49, further comprising: 
an -wherein the operating system further configured to include in the external con- 
figuration information protocols allowed to run on the selected virtual server. 

55. (Currently Amended) The server method of claim 49, wherein the further com 

an operating system further configured to include the internal configuration in- 
formation in a virtual server context data structure stored in storage space assigned to the 
virtual server. 

56. (Currently Amended) The server method of claim 49, further comprising: 
an -wherein the operating system further configured to include in the internal con- 
figuration information a pointer to software associated with hardware assigned to the vir- 
tual server in the global repository. 

57. (Currently Amended) The server method of claim 49, further comprising: 
an -wherein the operating system further configured to include in the internal con- 
figuration information a pointer to software associated with an IP address assigned to the 
virtual server in the global repository. 

58. (Currently Amended) The server method of claim 49, further comprising: 
an -wherein the operating system further configured to include in the internal con- 
figuration information a pointer to software associated with a unit of storage assigned to 
the virtual server in the global repository. 
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59. (Currently Amended) The server method of claim 49, further comprising: 
an -wherein the operating system further configured to include in the internal con- 
figuration information a pointer to software associated with a protocol assigned to the 
virtual server in the global repository. 

60. (Currently Amended) The server method of claim 49, further comprising: 
an -wherein the operating system further configured to include in the internal con- 
figuration information a pointer to software associated with a security domain assigned to 
the virtual server in the global repository. 

61. (Currently Amended) The server method of claim 49, further comprising: 
an -wherein the operating system further configured to include in the internal con- 
figuration information a pointer to software associated with a security data base holding 
security information assigned to the virtual server. 

62. (Currently Amended) The server method of claim 49, further comprising: 
an -wherein the operating system further configured to include in the internal con- 
figuration information a pointer to software associated with storage units which the vir- 
tual server is permitted to access to enable the virtual server to perform boundary checks 
when accessing storage blocks. 

63. (Currently Amended) The server method of claim 49, further comprising: 
an -wherein the operating system further configured to include in the internal con- 
figuration information a pointer to software associated with a file system identification 
(fsid) table, the fsid serving as an index into the fsid table to an entry indicating whether 
or not the virtual server completely owns a unit of storage, and in the event that the entry 
in the fsid table indicates that the virtual server does completely own the unit of storage, 
permitting the virtual server access to the unit of storage. 
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64. (Currently Amended) The server method of claim 49, further comprising: 
an -wherein the operating system further configured to include in the internal con- 
figuration information a pointer to software associated with a file system identification 
(fsid) table, the fsid serving as an index into the fsid table to an entry indicating whether 
or not the virtual server completely owns a unit of storage, and in the event that the entry 
in the fsid table indicates that a different virtual server does completely own the unit of 
storage, the operating system to deny the virtual server access to the unit of storage. 

65. (Currently Amended) The server method of claim 64, further comprising: 

in the event that the virtual server does not completely own the unit of storage and 
in the event that no different virtual server completely owns the unit of storage, the oper- 
ating system to enter a qtree table using a qtree to the unit of storage to determine if the 
virtual server owns the qtree to the unit of storage, and if the virtual server does own the 
qtree to the unit of storage, the operating system to provide access by the virtual server to 
the unit of storage. 

66. (Currently Amended) The server method of claim 49, further comprising: 
an -the operating system further configured to receive an authentication request, 

the authentication request requiring contacting an external server; and 

the operating system to read from the internal configuration information a process 
identification (PID) that enables an operating system to send an authentication request to 
the-a_correct authentication process. 

67. (Currently Amended) A computer readable media, comprising: 

said computer readable media containing instructions for execution on a processor 
for the practice of a method of maintaining a plurality of virtual servers on a server, the 
method having the steps of, 

storing external configuration information of a selected virtual server of the plu- 
rality of virtual servers in a global repository maintained on a storage device disk of the 
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server, the external configuration information describing external resources assigned to a 
virtual server of the plurality of virtual servers; 

storing internal configuration information of the selected virtual server of the plu- 
rality of virtual servers in a private repository, the private repository stored in the-one or 
more units of storage assigned to the virtual server, the internal configuration information 
used to control operation of the selected virtual server; and 

maintaining security domain information in the internal configuration informa- 
tion , wherein the security domain information is used to control access to the selected 
virtual server . 
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